Implement Azure API Management AZ-204 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has an API that is called by a web application. The web application sends a header 'X-User-ID' that is used by the backend for logging. The company wants to ensure that this header is not spoofed by clients. They also want to add a timestamp to the request for auditing. What should they do in Azure API Management?

   • AAdd a set-body policy to include the user ID and timestamp in the request body.
   • BAdd a set-header policy to overwrite the X-User-ID header with a value from the JWT token, and add a set-header policy to add a timestamp.
   • CAdd a rewrite-uri policy to modify the header and add a timestamp.
   • DAdd a validate-jwt policy to verify the token and then use a set-header policy to add the timestamp.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Azure API Management, what is the default method for authenticating developer access to the Developer Portal?

   • ALocal username and password accounts
   • BX.509 client certificates
   • CAzure Active Directory (Microsoft Entra ID)
   • DGitHub credentials
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which built-in feature of Azure API Management automatically generates interactive documentation for your APIs?

   • AThe API Inspector
   • BThe Developer Portal
   • CThe Azure Monitor blade
   • DThe Policy Editor
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the Azure portal, which of the following methods can you use to create an API in Azure API Management?

   • AUse the Azure CLI command 'az apim create-api'
   • BUpload a Docker image containing the API code
   • CCreate a new API from a Logic App definition
   • DImport an OpenAPI specification (Swagger) file
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has an API that occasionally returns sensitive data in error messages. They want to ensure that error messages returned to clients do not contain stack traces or internal details. What should they configure in Azure API Management?

   • AEnable the 'Hide internal error details' setting in the API Management instance.
   • BAdd a set-body policy to replace the error response with a generic message.
   • CAdd a choose policy that checks the status code and uses set-body to return a generic error message.
   • DAdd a return-response policy to return a generic error message for all requests.
   Reveal Solution Discussion Select an answer first